Struct GuardContext 

pub struct GuardContext<'a> {
    pub request: &'a PortableToolCallRequest,
    pub scope: &'a ChioScope,
    pub agent_id: &'a str,
    pub server_id: &'a str,
    pub session_filesystem_roots: Option<&'a [String]>,
    pub matched_grant_index: Option<usize>,
}

Inputs a guard sees when it runs inside the core evaluate pipeline.

Mirrors chio_kernel::GuardContext with two deliberate restrictions:

• request carries only the portable shape (no dpop_proof, governed_intent, approval_token, or model_metadata – those are full-kernel concerns). The legacy adapter in chio-kernel builds a temporary PortableToolCallRequest when it runs the core evaluate pipeline.
• session_filesystem_roots stays in the portable surface so the filesystem-roots guard (today the only session-aware guard) can run unchanged on every platform.

Fields

request: &'a PortableToolCallRequest

The tool call request being evaluated.

scope: &'a ChioScope

The verified capability scope.

agent_id: &'a str

The agent making the request.

server_id: &'a str

The target server.

session_filesystem_roots: Option<&'a [String]>

Session-scoped enforceable filesystem roots, when the request is being evaluated through the supported session-backed runtime path.

matched_grant_index: Option<usize>

Index of the matched grant in the capability’s scope, populated by [crate::evaluate] before guards run.